Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

Select Badges

Select Supported Platforms

Select Status

The letsencrypt cookbook has been deprecated

Author provided reason for deprecation:

The letsencrypt cookbook has been deprecated and is no longer being maintained by its authors. Use of the letsencrypt cookbook is no longer recommended.

You may find that the acme cookbook is a suitable alternative.


letsencrypt (12) Versions 0.1.0

Install free and trusted SSL/TLS certificates from Let's Encrypt

cookbook 'letsencrypt', '= 0.1.0', :supermarket
cookbook 'letsencrypt', '= 0.1.0'
knife supermarket install letsencrypt
knife supermarket download letsencrypt
Quality -%

letsencrypt cookbook

Automatically get/renew free and trusted certificates from Let's Encrypt (



  • node['letsencrypt']['contact'] - Contact information, default empty.
  • node['letsencrypt']['endpoint'] - ACME server endpoint, default ''. Set to for real certificates.
  • node['letsencrypt']['renew'] - Days before the certificate expires at which the certificate will be renewed, default 30.



Installs the required acme-client rubygem.


Use the letsencrypt_certificate provider to request a certificate. The webserver for the domain for which you are requesting a certificate must be running on the local server. Currently only the http validation method is supported. Provide the path to your wwwroot for the specified domain.

letsencrypt_certificate '' do
  crt      '/etc/ssl/'
  key      '/etc/ssl/'
  method   'http'
  wwwroot  '/var/www'

In case your webserver needs an already existing certificate when installing a new server you will have a bootstrap problem. Webserver cannot start without certificate, but the certificate cannot be requested without the running webserver. To overcome this a self-signed certificate can be generated with the letsencrypt_selfsigned provider.

letsencrypt_selfsigned '' do
  crt     '/etc/ssl/'
  key     '/etc/ssl/'

A working example can be found in the included acme_client test cookbook.


The kitchen includes a boulder server to run the integration tests with, so testing can run locally without interaction with the online API's.


  1. Fork the repository on Github
  2. Create a named feature branch (like add_component_x)
  3. Write your change
  4. Write tests for your change (if applicable)
  5. Run the tests, ensuring they all pass
  6. Submit a Pull Request using Github

License and Authors

Authors: Thijs Houtenbos

Letsencrypt CHANGELOG

This file is used to list changes made in each version of the acme cookbook.


  • Thijs Houtenbos - Initial release

Check the Markdown Syntax Guide for help with Markdown.

The Github Flavored Markdown page describes the differences between markdown on github and standard markdown.

No quality metric results found